@kungfu-tech/buildchain 4.0.0 → 4.0.1-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (228) hide show
  1. package/AGENTS.md +13 -5
  2. package/actions/promote-buildchain-ref/README.md +11 -6
  3. package/actions/release-tail/README.md +8 -0
  4. package/architecture/ci-lane-change-budget.json +187 -0
  5. package/architecture/decisions/0002-next-development-transition.md +101 -0
  6. package/architecture/decisions/0003-two-phase-delivery-warrant.md +152 -0
  7. package/architecture/internal-capabilities.json +219 -7
  8. package/architecture/maintainability-policy.json +246 -29
  9. package/architecture/release-tail-contract-inventory.json +5 -2
  10. package/architecture/v3-core-mechanism-inventory.json +91 -0
  11. package/architecture/v4-adopter-delivery-parity.json +32 -5
  12. package/architecture/v4-capability-state-machine-manifest.json +73 -0
  13. package/architecture/v4-compatibility-facts-parity.json +77 -0
  14. package/architecture/v4-delivery-authority-parity.json +250 -0
  15. package/architecture/v4-delivery-warrant-shadow-fixtures.json +41 -9
  16. package/architecture/v4-floating-consumer-policy.json +81 -0
  17. package/architecture/v4-floating-consumer-policy.md +32 -0
  18. package/architecture/v4-next-development-parity.json +192 -0
  19. package/architecture/v4-publication-rehearsal-parity.json +84 -0
  20. package/architecture/v4-release-train-parity.json +1 -0
  21. package/architecture/v4-runtime-ref-resume-authority.json +64 -0
  22. package/architecture/v4-stage-capsule-qualification.json +2 -2
  23. package/architecture/v4-tail-reseal-parity.json +150 -0
  24. package/bin/buildchain.mjs +32 -3
  25. package/bin/internal/adopter-delivery-cli.mjs +70 -0
  26. package/bin/internal/command-registry.mjs +3 -0
  27. package/bin/internal/compatibility-facts-cli.mjs +101 -0
  28. package/bin/internal/trust-release-release-handlers.mjs +5 -0
  29. package/contracts/dev-delivery-authority-v2.schema.json +662 -0
  30. package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +47 -0
  31. package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +47 -0
  32. package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +40 -0
  33. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +19 -0
  34. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +93 -0
  35. package/contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json +29 -0
  36. package/contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json +26 -0
  37. package/contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json +50 -0
  38. package/contracts/fixtures/v4-compatibility-facts-v1/shared.json +1129 -0
  39. package/contracts/fixtures/v4-floating-consumer-policy-v1/cases.json +59 -0
  40. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/artifacts/product.bin +1 -0
  41. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/config/buildchain.toml +5 -0
  42. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/release-activation.json +1 -0
  43. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/signed-channel.json +1 -0
  44. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/evidence/qualification.json +1 -0
  45. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/candidate.json +5 -0
  46. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/release-passport.json +1 -0
  47. package/contracts/fixtures/v4-publication-rehearsal-v1/capsule.json +707 -0
  48. package/contracts/fixtures/v4-publication-rehearsal-v1/offline-vectors.json +27 -0
  49. package/contracts/fixtures/v4-runtime-ref-resume-authority-v1/scenario.json +15 -0
  50. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +229 -0
  51. package/contracts/next-development-request-v1.schema.json +66 -0
  52. package/contracts/next-development-transition-v1.schema.json +292 -0
  53. package/contracts/v4-adopter-delivery-v1.schema.json +81 -0
  54. package/contracts/v4-compatibility-facts-v1.schema.json +230 -0
  55. package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +107 -0
  56. package/contracts/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  57. package/contracts/v4-runtime-ref-resume-authority-v1.schema.json +235 -0
  58. package/contracts/v4-tail-reseal-v1.schema.json +276 -0
  59. package/dist/site/agent-index.json +5 -0
  60. package/dist/site/artifact-schemas.json +10 -0
  61. package/dist/site/buildchain-contract.json +1562 -44
  62. package/dist/site/buildchain-site.json +684 -42
  63. package/dist/site/capability-registry.json +17 -14
  64. package/dist/site/cli-registry.json +205 -3
  65. package/dist/site/controller-registry.json +62 -6
  66. package/dist/site/kfd-claims.json +551 -22
  67. package/dist/site/kfd-upstream-aggregate.json +1 -1
  68. package/dist/site/manual-registry.json +55 -9
  69. package/dist/site/node-api-registry.json +15247 -8690
  70. package/dist/site/page-registry.json +647 -29
  71. package/dist/site/public-surface-audit.json +876 -55
  72. package/dist/site/publication-authority-registry.json +44 -8
  73. package/dist/site/publication-registry.json +4 -4
  74. package/dist/site/release-provenance.json +26 -0
  75. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +662 -0
  76. package/dist/site/schemas/release-tail-capabilities-v1.schema.json +199 -0
  77. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +81 -0
  78. package/dist/site/schemas/v4-compatibility-facts-v1.schema.json +230 -0
  79. package/dist/site/schemas/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  80. package/dist/site/site-manifest.json +37 -13
  81. package/dist/site/workflow-registry.json +200 -22
  82. package/docs/MAP.md +10 -2
  83. package/docs/cli-reference.md +404 -13
  84. package/docs/cli.md +8 -0
  85. package/docs/dev-alpha-candidate-patrol.md +8 -0
  86. package/docs/dev-delivery-qualification-landing-adr.md +251 -0
  87. package/docs/dev-delivery-warrant.md +361 -30
  88. package/docs/lifecycle-protocol.md +41 -0
  89. package/docs/next-development-transition.md +118 -0
  90. package/docs/node-api-reference.md +748 -322
  91. package/docs/release-tail-provider-plane.md +30 -0
  92. package/docs/reusable-build-surface.md +41 -0
  93. package/docs/runtime-train-validation.md +10 -0
  94. package/docs/v4-adopter-delivery.md +133 -0
  95. package/docs/v4-compatibility-facts.md +91 -0
  96. package/docs/v4-publication-rehearsal.md +130 -0
  97. package/docs/v4-runtime-ref-resume-authority.md +69 -0
  98. package/docs/v4-tail-reseal.md +73 -0
  99. package/docs/versioning.md +4 -2
  100. package/package.json +36 -6
  101. package/packages/core/adopter-delivery-passport.js +259 -0
  102. package/packages/core/adopter-delivery-vectors.js +158 -0
  103. package/packages/core/adopter-delivery-vectors.json +77 -0
  104. package/packages/core/artifact-signing.js +61 -0
  105. package/packages/core/buildchain-agent-manuals.js +3 -0
  106. package/packages/core/buildchain-compatibility-authority.js +336 -0
  107. package/packages/core/buildchain-compatibility-fact.js +394 -0
  108. package/packages/core/buildchain-compatibility-facts.json +217 -0
  109. package/packages/core/buildchain-compatibility-proof.js +566 -0
  110. package/packages/core/buildchain-config.js +150 -1
  111. package/packages/core/buildchain-contract.js +96 -143
  112. package/packages/core/buildchain-delivery-bootstrap.js +240 -0
  113. package/packages/core/buildchain-delivery-infrastructure.js +164 -0
  114. package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
  115. package/packages/core/buildchain-publication-authority.js +1 -0
  116. package/packages/core/channel-candidate.js +8 -0
  117. package/packages/core/channel-promotion-baseline.js +55 -0
  118. package/packages/core/ci-lane-change-budget.js +247 -0
  119. package/packages/core/dev-alpha-candidate-selection.js +10 -2
  120. package/packages/core/dev-delivery-authority-candidate.js +270 -0
  121. package/packages/core/dev-delivery-authority-evidence.js +146 -0
  122. package/packages/core/dev-delivery-authority-landing.js +461 -0
  123. package/packages/core/dev-delivery-authority-observation.js +48 -0
  124. package/packages/core/dev-delivery-authority-qualification.js +591 -0
  125. package/packages/core/dev-delivery-authority-settlement.js +213 -0
  126. package/packages/core/dev-delivery-authority-state.js +583 -0
  127. package/packages/core/dev-delivery-candidate-identity.js +13 -0
  128. package/packages/core/dev-delivery-contract-surface.js +76 -0
  129. package/packages/core/dev-delivery-execution-failure.js +133 -0
  130. package/packages/core/dev-delivery-execution-transfer.js +592 -0
  131. package/packages/core/dev-delivery-landing-admission-core.js +119 -0
  132. package/packages/core/dev-delivery-landing-readback.js +598 -0
  133. package/packages/core/dev-delivery-landing-terminal-evidence.js +271 -0
  134. package/packages/core/dev-delivery-landing-testing-port.js +6 -0
  135. package/packages/core/dev-delivery-native-execution.js +110 -0
  136. package/packages/core/dev-delivery-native-proof.js +562 -0
  137. package/packages/core/dev-delivery-process-boundary.js +563 -0
  138. package/packages/core/dev-delivery-proof.js +37 -3
  139. package/packages/core/dev-delivery-provider-attempt.js +127 -0
  140. package/packages/core/dev-delivery-provider-heartbeat.js +382 -0
  141. package/packages/core/dev-delivery-warrant-cancellation.js +1 -0
  142. package/packages/core/dev-delivery-warrant-qualification.js +145 -0
  143. package/packages/core/dev-delivery-warrant-settlement.js +237 -36
  144. package/packages/core/dev-delivery-warrant-state.js +587 -0
  145. package/packages/core/dev-delivery-warrant.js +328 -370
  146. package/packages/core/github-governance-authority.js +1 -0
  147. package/packages/core/index.js +7 -0
  148. package/packages/core/kungfu-temporal-fact.js +557 -0
  149. package/packages/core/legacy-kfd-adopter-driver.js +167 -0
  150. package/packages/core/next-development-candidate-reservation.js +186 -0
  151. package/packages/core/next-development-controller.js +728 -0
  152. package/packages/core/next-development-projection.js +287 -0
  153. package/packages/core/next-development-transition.js +738 -0
  154. package/packages/core/paper-agent-entry.js +11 -5
  155. package/packages/core/paper.js +16 -5
  156. package/packages/core/publication-authority.js +5 -5
  157. package/packages/core/published-delivery-authority.js +266 -0
  158. package/packages/core/release-candidate-recovery.js +66 -11
  159. package/packages/core/release-candidate.js +79 -19
  160. package/packages/core/release-passport.js +271 -38
  161. package/packages/core/v4-adopter-delivery-parity.js +3 -3
  162. package/packages/core/v4-adopter-delivery.js +359 -0
  163. package/packages/core/v4-canonical-contracts.js +5 -0
  164. package/packages/core/v4-delivery-warrant-read-candidate.js +10 -3
  165. package/packages/core/v4-floating-consumer-evidence.js +338 -0
  166. package/packages/core/v4-floating-consumer-policy.js +569 -0
  167. package/packages/core/v4-floating-consumer-release-passport.js +153 -0
  168. package/packages/core/v4-publication-rehearsal-capsule.js +468 -0
  169. package/packages/core/v4-publication-rehearsal-provider-bindings.js +212 -0
  170. package/packages/core/v4-publication-rehearsal.js +481 -0
  171. package/packages/core/v4-runtime-ref-resume-authority.js +625 -0
  172. package/packages/core/v4-runtime-selector-persistence.js +228 -0
  173. package/packages/core/v4-tail-reseal-contract.js +26 -0
  174. package/packages/core/v4-tail-reseal-github.js +178 -0
  175. package/packages/core/v4-tail-reseal-receipt.js +225 -0
  176. package/packages/core/v4-tail-reseal.js +594 -0
  177. package/packages/core/workflow-yaml-contract.js +72 -2
  178. package/scripts/audit-publication-control-plane.mjs +31 -31
  179. package/scripts/buildchain-cli-help.mjs +41 -2
  180. package/scripts/check-ci-lane-change-budget.mjs +100 -0
  181. package/scripts/check-inventory.mjs +14 -3
  182. package/scripts/check-v4-floating-consumer-policy-contract.mjs +217 -0
  183. package/scripts/check-v4-public-dogfood-contract.mjs +6 -11
  184. package/scripts/dev-alpha-candidate-patrol.mjs +22 -1
  185. package/scripts/dev-delivery-authority-command-adapters.mjs +206 -0
  186. package/scripts/dev-delivery-authority-provider.mjs +28 -0
  187. package/scripts/dev-delivery-authority.mjs +490 -0
  188. package/scripts/dev-delivery-native-run.mjs +177 -0
  189. package/scripts/dev-delivery-process-boundary.mjs +260 -0
  190. package/scripts/dev-delivery-proof.mjs +67 -2
  191. package/scripts/dev-delivery-provider-heartbeat.mjs +215 -0
  192. package/scripts/dev-delivery-source-proof-replay.mjs +153 -0
  193. package/scripts/dev-delivery-source-proof-reuse.mjs +547 -0
  194. package/scripts/dev-delivery-two-phase-resume.mjs +345 -0
  195. package/scripts/dev-delivery-two-phase.mjs +573 -0
  196. package/scripts/dev-delivery-warrant-options.mjs +266 -0
  197. package/scripts/dev-delivery-warrant-store.mjs +231 -0
  198. package/scripts/dev-delivery-warrant.mjs +232 -194
  199. package/scripts/dev-pr-auto-merge.mjs +37 -48
  200. package/scripts/dev-pr-delivery-warrant.mjs +216 -2
  201. package/scripts/dev-pr-prequeue-guard.mjs +399 -0
  202. package/scripts/dev-qualification-patrol.mjs +9 -9
  203. package/scripts/dispatch-artifact-signing-authority.mjs +1 -1
  204. package/scripts/ensure-github-release.mjs +3 -3
  205. package/scripts/generate-channel-build-workflow.mjs +3 -0
  206. package/scripts/generate-channel-promotion-workflow.mjs +114 -14
  207. package/scripts/generate-next-development-guidance.mjs +49 -0
  208. package/scripts/generate-release-candidate-passport.mjs +192 -32
  209. package/scripts/generate-site-bundle.mjs +69 -4
  210. package/scripts/init-repo.mjs +26 -4
  211. package/scripts/inspect-artifact-signing-requests.mjs +6 -0
  212. package/scripts/next-development-self-dogfood-harness.mjs +460 -0
  213. package/scripts/next-development-self-dogfood.mjs +597 -0
  214. package/scripts/next-development-transition.mjs +47 -0
  215. package/scripts/npm-publish-transaction.mjs +103 -91
  216. package/scripts/promotion-channel-router.mjs +4 -4
  217. package/scripts/release-candidate-anchor-provenance.mjs +99 -0
  218. package/scripts/release-tail.mjs +51 -3
  219. package/scripts/release-train-self-dogfood.mjs +94 -92
  220. package/scripts/resume-from-candidate-run.mjs +565 -41
  221. package/scripts/seal-artifact-signing-requests.mjs +6 -0
  222. package/scripts/site-capability-metadata.mjs +43 -0
  223. package/scripts/stable-candidate-qualification.mjs +9 -10
  224. package/scripts/v4-consumer-policy.mjs +231 -0
  225. package/scripts/v4-publication-rehearsal-fixture.mjs +144 -0
  226. package/scripts/v4-tail-reseal-macos-rehearsal.mjs +134 -0
  227. package/scripts/v4-tail-reseal.mjs +416 -0
  228. package/templates/native-dev-delivery.yml +143 -0
package/docs/cli-reference.md CHANGED
@@ -22,6 +22,63 @@ ai_provenance:
22
22
 
23
23
  Every listed help command is intercepted before dispatch, exits zero, and performs no command side effects.
24
24
 
25
+ ## `adopter-delivery`
26
+
27
+ ### `buildchain adopter-delivery`
28
+
29
+ - Help: `buildchain adopter-delivery --help`
30
+ - Canonical id: `adopter-delivery`
31
+ - Options: none declared
32
+ - Syntax:
33
+
34
+ ```text
35
+ buildchain adopter-delivery
36
+ ```
37
+
38
+ ### `buildchain adopter-delivery archive`
39
+
40
+ - Help: `buildchain adopter-delivery archive --help`
41
+ - Canonical id: `adopter-delivery`
42
+ - Options: `--input`, `--output`
43
+ - Syntax:
44
+
45
+ ```text
46
+ buildchain adopter-delivery archive --input <json-or-path> [--output <path>]
47
+ ```
48
+
49
+ ### `buildchain adopter-delivery bootstrap`
50
+
51
+ - Help: `buildchain adopter-delivery bootstrap --help`
52
+ - Canonical id: `adopter-delivery`
53
+ - Options: `--input`, `--output`
54
+ - Syntax:
55
+
56
+ ```text
57
+ buildchain adopter-delivery bootstrap --input <json-or-path> [--output <path>]
58
+ ```
59
+
60
+ ### `buildchain adopter-delivery run`
61
+
62
+ - Help: `buildchain adopter-delivery run --help`
63
+ - Canonical id: `adopter-delivery`
64
+ - Options: `--input`, `--output`
65
+ - Syntax:
66
+
67
+ ```text
68
+ buildchain adopter-delivery run --input <json-or-path> [--output <path>]
69
+ ```
70
+
71
+ ### `buildchain adopter-delivery verify`
72
+
73
+ - Help: `buildchain adopter-delivery verify --help`
74
+ - Canonical id: `adopter-delivery`
75
+ - Options: `--input`, `--output`, `--readback`
76
+ - Syntax:
77
+
78
+ ```text
79
+ buildchain adopter-delivery verify --input <json-or-path> --readback <json-or-path> [--output <path>]
80
+ ```
81
+
25
82
  ## `architecture`
26
83
 
27
84
  ### `buildchain architecture`
@@ -269,6 +326,127 @@ buildchain create runner-provenance --input-json <file-or-json> [--output <file>
269
326
  buildchain dev
270
327
  ```
271
328
 
329
+ ### `buildchain dev authority admit-merge-group`
330
+
331
+ - Help: `buildchain dev authority admit-merge-group --help`
332
+ - Canonical id: `dev`
333
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
334
+ - Syntax:
335
+
336
+ ```text
337
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
338
+ ```
339
+
340
+ ### `buildchain dev authority complete-qualification`
341
+
342
+ - Help: `buildchain dev authority complete-qualification --help`
343
+ - Canonical id: `dev`
344
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
345
+ - Syntax:
346
+
347
+ ```text
348
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
349
+ ```
350
+
351
+ ### `buildchain dev authority heartbeat-landing`
352
+
353
+ - Help: `buildchain dev authority heartbeat-landing --help`
354
+ - Canonical id: `dev`
355
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
356
+ - Syntax:
357
+
358
+ ```text
359
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
360
+ ```
361
+
362
+ ### `buildchain dev authority heartbeat-qualification`
363
+
364
+ - Help: `buildchain dev authority heartbeat-qualification --help`
365
+ - Canonical id: `dev`
366
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
367
+ - Syntax:
368
+
369
+ ```text
370
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
371
+ ```
372
+
373
+ ### `buildchain dev authority lease-landing`
374
+
375
+ - Help: `buildchain dev authority lease-landing --help`
376
+ - Canonical id: `dev`
377
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
378
+ - Syntax:
379
+
380
+ ```text
381
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
382
+ ```
383
+
384
+ ### `buildchain dev authority lease-qualification`
385
+
386
+ - Help: `buildchain dev authority lease-qualification --help`
387
+ - Canonical id: `dev`
388
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
389
+ - Syntax:
390
+
391
+ ```text
392
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
393
+ ```
394
+
395
+ ### `buildchain dev authority migrate`
396
+
397
+ - Help: `buildchain dev authority migrate --help`
398
+ - Canonical id: `dev`
399
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
400
+ - Syntax:
401
+
402
+ ```text
403
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
404
+ ```
405
+
406
+ ### `buildchain dev authority observe`
407
+
408
+ - Help: `buildchain dev authority observe --help`
409
+ - Canonical id: `dev`
410
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
411
+ - Syntax:
412
+
413
+ ```text
414
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
415
+ ```
416
+
417
+ ### `buildchain dev authority recover`
418
+
419
+ - Help: `buildchain dev authority recover --help`
420
+ - Canonical id: `dev`
421
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
422
+ - Syntax:
423
+
424
+ ```text
425
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
426
+ ```
427
+
428
+ ### `buildchain dev authority settle`
429
+
430
+ - Help: `buildchain dev authority settle --help`
431
+ - Canonical id: `dev`
432
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
433
+ - Syntax:
434
+
435
+ ```text
436
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
437
+ ```
438
+
439
+ ### `buildchain dev authority submit`
440
+
441
+ - Help: `buildchain dev authority submit --help`
442
+ - Canonical id: `dev`
443
+ - Options: `--branch`, `--environment-root`, `--execute`, `--json`, `--output`, `--provider-attempt`, `--qualification-domains`, `--repository`
444
+ - Syntax:
445
+
446
+ ```text
447
+ buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--environment-root <root>] [--qualification-domains <json>] [--provider-attempt <admitted-attempt.json>] [--execute] [--output <file>] [--json]
448
+ ```
449
+
272
450
  ### `buildchain dev merge-queue`
273
451
 
274
452
  - Help: `buildchain dev merge-queue --help`
@@ -299,7 +477,18 @@ buildchain dev pr-admit --repository <owner/repo> --branch <dev/vN/vN.M> --pull-
299
477
  - Syntax:
300
478
 
301
479
  ```text
302
- buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]
480
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
481
+ ```
482
+
483
+ ### `buildchain dev proof classify-native`
484
+
485
+ - Help: `buildchain dev proof classify-native --help`
486
+ - Canonical id: `dev`
487
+ - Options: `--json`, `--output`
488
+ - Syntax:
489
+
490
+ ```text
491
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
303
492
  ```
304
493
 
305
494
  ### `buildchain dev proof integration`
@@ -310,7 +499,18 @@ buildchain dev proof <source|verify-source|classify|replay|integration|verify-in
310
499
  - Syntax:
311
500
 
312
501
  ```text
313
- buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]
502
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
503
+ ```
504
+
505
+ ### `buildchain dev proof native`
506
+
507
+ - Help: `buildchain dev proof native --help`
508
+ - Canonical id: `dev`
509
+ - Options: `--json`, `--output`
510
+ - Syntax:
511
+
512
+ ```text
513
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
314
514
  ```
315
515
 
316
516
  ### `buildchain dev proof replay`
@@ -321,7 +521,7 @@ buildchain dev proof <source|verify-source|classify|replay|integration|verify-in
321
521
  - Syntax:
322
522
 
323
523
  ```text
324
- buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]
524
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
325
525
  ```
326
526
 
327
527
  ### `buildchain dev proof source`
@@ -332,7 +532,7 @@ buildchain dev proof <source|verify-source|classify|replay|integration|verify-in
332
532
  - Syntax:
333
533
 
334
534
  ```text
335
- buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]
535
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
336
536
  ```
337
537
 
338
538
  ### `buildchain dev proof verify-integration`
@@ -343,7 +543,29 @@ buildchain dev proof <source|verify-source|classify|replay|integration|verify-in
343
543
  - Syntax:
344
544
 
345
545
  ```text
346
- buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]
546
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
547
+ ```
548
+
549
+ ### `buildchain dev proof verify-native`
550
+
551
+ - Help: `buildchain dev proof verify-native --help`
552
+ - Canonical id: `dev`
553
+ - Options: `--json`, `--output`
554
+ - Syntax:
555
+
556
+ ```text
557
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
558
+ ```
559
+
560
+ ### `buildchain dev proof verify-native-reuse`
561
+
562
+ - Help: `buildchain dev proof verify-native-reuse --help`
563
+ - Canonical id: `dev`
564
+ - Options: `--json`, `--output`
565
+ - Syntax:
566
+
567
+ ```text
568
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
347
569
  ```
348
570
 
349
571
  ### `buildchain dev proof verify-source`
@@ -354,7 +576,18 @@ buildchain dev proof <source|verify-source|classify|replay|integration|verify-in
354
576
  - Syntax:
355
577
 
356
578
  ```text
357
- buildchain dev proof <source|verify-source|classify|replay|integration|verify-integration> [--output <file>] [--json]
579
+ buildchain dev proof <source|verify-source|classify|native|verify-native|classify-native|verify-native-reuse|replay|integration|verify-integration> [--output <file>] [--json]
580
+ ```
581
+
582
+ ### `buildchain dev two-phase`
583
+
584
+ - Help: `buildchain dev two-phase --help`
585
+ - Canonical id: `dev`
586
+ - Options: `--branch`, `--expected-head`, `--json`, `--native-command`, `--native-proof`, `--output`, `--pull-request`, `--repository`, `--warrant-result`
587
+ - Syntax:
588
+
589
+ ```text
590
+ buildchain dev two-phase --repository <owner/repo> --branch <dev/vN/vN.M> --pull-request <n> --expected-head <sha> --warrant-result <file> --native-command <command> [--native-proof <file>] [--output <file>] [--json]
358
591
  ```
359
592
 
360
593
  ### `buildchain dev warrant cancel-queued`
@@ -365,7 +598,7 @@ buildchain dev proof <source|verify-source|classify|replay|integration|verify-in
365
598
  - Syntax:
366
599
 
367
600
  ```text
368
- buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
601
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
369
602
  ```
370
603
 
371
604
  ### `buildchain dev warrant close`
@@ -376,7 +609,7 @@ buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|obse
376
609
  - Syntax:
377
610
 
378
611
  ```text
379
- buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
612
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
380
613
  ```
381
614
 
382
615
  ### `buildchain dev warrant heartbeat`
@@ -387,7 +620,7 @@ buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|obse
387
620
  - Syntax:
388
621
 
389
622
  ```text
390
- buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
623
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
391
624
  ```
392
625
 
393
626
  ### `buildchain dev warrant observe`
@@ -398,7 +631,18 @@ buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|obse
398
631
  - Syntax:
399
632
 
400
633
  ```text
401
- buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
634
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
635
+ ```
636
+
637
+ ### `buildchain dev warrant qualify`
638
+
639
+ - Help: `buildchain dev warrant qualify --help`
640
+ - Canonical id: `dev`
641
+ - Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
642
+ - Syntax:
643
+
644
+ ```text
645
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
402
646
  ```
403
647
 
404
648
  ### `buildchain dev warrant recover`
@@ -409,7 +653,7 @@ buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|obse
409
653
  - Syntax:
410
654
 
411
655
  ```text
412
- buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
656
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
413
657
  ```
414
658
 
415
659
  ### `buildchain dev warrant select`
@@ -420,7 +664,18 @@ buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|obse
420
664
  - Syntax:
421
665
 
422
666
  ```text
423
- buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
667
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
668
+ ```
669
+
670
+ ### `buildchain dev warrant settle`
671
+
672
+ - Help: `buildchain dev warrant settle --help`
673
+ - Canonical id: `dev`
674
+ - Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
675
+ - Syntax:
676
+
677
+ ```text
678
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
424
679
  ```
425
680
 
426
681
  ### `buildchain dev warrant submit`
@@ -431,7 +686,7 @@ buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|obse
431
686
  - Syntax:
432
687
 
433
688
  ```text
434
- buildchain dev warrant <submit|select|heartbeat|recover|close|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
689
+ buildchain dev warrant <submit|select|heartbeat|qualify|recover|close|settle|cancel-queued|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
435
690
  ```
436
691
 
437
692
  ## `diagnostics`
@@ -530,6 +785,50 @@ buildchain facts
530
785
  buildchain facts aggregate [--cwd <dir>] [--product <id>] [--module-fact <file>]... [--artifact <path>]... [--output <file>] [--json]
531
786
  ```
532
787
 
788
+ ### `buildchain facts compatibility project`
789
+
790
+ - Help: `buildchain facts compatibility project --help`
791
+ - Canonical id: `build-facts`
792
+ - Options: `--cwd`, `--json`, `--output`, `--registry`
793
+ - Syntax:
794
+
795
+ ```text
796
+ buildchain facts compatibility project [--cwd <dir>] [--registry <json-or-path>] [--output <file>] [--json]
797
+ ```
798
+
799
+ ### `buildchain facts compatibility query`
800
+
801
+ - Help: `buildchain facts compatibility query --help`
802
+ - Canonical id: `build-facts`
803
+ - Options: `--cwd`, `--json`, `--query`, `--registry`
804
+ - Syntax:
805
+
806
+ ```text
807
+ buildchain facts compatibility query --query <json-or-path> [--registry <json-or-path>] [--cwd <dir>] [--json]
808
+ ```
809
+
810
+ ### `buildchain facts compatibility query-template`
811
+
812
+ - Help: `buildchain facts compatibility query-template --help`
813
+ - Canonical id: `build-facts`
814
+ - Options: `--cwd`, `--fact-root`, `--json`, `--query-id`, `--registry`
815
+ - Syntax:
816
+
817
+ ```text
818
+ buildchain facts compatibility query-template --fact-root <sha256:...> [--query-id <id>] [--registry <json-or-path>] [--cwd <dir>] [--json]
819
+ ```
820
+
821
+ ### `buildchain facts compatibility verify`
822
+
823
+ - Help: `buildchain facts compatibility verify --help`
824
+ - Canonical id: `build-facts`
825
+ - Options: `--cwd`, `--json`, `--registry`
826
+ - Syntax:
827
+
828
+ ```text
829
+ buildchain facts compatibility verify [--cwd <dir>] [--registry <json-or-path>] [--json]
830
+ ```
831
+
533
832
  ### `buildchain facts module`
534
833
 
535
834
  - Help: `buildchain facts module --help`
@@ -1388,6 +1687,30 @@ buildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <
1388
1687
  buildchain mark --event <name> [--phase <phase>] [--component <name>] [--attribute key=value]... [--path <jsonl>] [--json]
1389
1688
  ```
1390
1689
 
1690
+ ## `next-development`
1691
+
1692
+ ### `buildchain next-development`
1693
+
1694
+ - Help: `buildchain next-development --help`
1695
+ - Canonical id: `next-development`
1696
+ - Options: none declared
1697
+ - Syntax:
1698
+
1699
+ ```text
1700
+ buildchain next-development
1701
+ ```
1702
+
1703
+ ### `buildchain next-development materialize`
1704
+
1705
+ - Help: `buildchain next-development materialize --help`
1706
+ - Canonical id: `next-development`
1707
+ - Options: `--cwd`, `--input`, `--json`, `--output`, `--write`
1708
+ - Syntax:
1709
+
1710
+ ```text
1711
+ buildchain next-development materialize --input <request.json> [--cwd <dir>] [--write] [--output <path>] [--json]
1712
+ ```
1713
+
1391
1714
  ## `npm`
1392
1715
 
1393
1716
  ### `buildchain npm`
@@ -1980,6 +2303,17 @@ buildchain release-tail init --declaration <json-or-path> [--state <path>]
1980
2303
  buildchain release-tail plan --declaration <json-or-path> [--output <path>]
1981
2304
  ```
1982
2305
 
2306
+ ### `buildchain release-tail rehearse`
2307
+
2308
+ - Help: `buildchain release-tail rehearse --help`
2309
+ - Canonical id: `release-tail`
2310
+ - Options: `--candidate-root`, `--capsule`, `--evidence`, `--mode`, `--state`
2311
+ - Syntax:
2312
+
2313
+ ```text
2314
+ buildchain release-tail rehearse --capsule <absolute-path> --candidate-root <absolute-path> --mode <simulate|replay> --state <absolute-path> --evidence <absolute-path>
2315
+ ```
2316
+
1983
2317
  ### `buildchain release-tail status`
1984
2318
 
1985
2319
  - Help: `buildchain release-tail status --help`
@@ -2039,6 +2373,63 @@ buildchain sample process-tree [--interval-ms <n>] [--label <name>] [--output <j
2039
2373
  buildchain span --event <name> [--phase <phase>] [--component <name>] [--path <jsonl>] -- <command> [args...]
2040
2374
  ```
2041
2375
 
2376
+ ## `tail-reseal`
2377
+
2378
+ ### `buildchain tail-reseal`
2379
+
2380
+ - Help: `buildchain tail-reseal --help`
2381
+ - Canonical id: `tail-reseal`
2382
+ - Options: none declared
2383
+ - Syntax:
2384
+
2385
+ ```text
2386
+ buildchain tail-reseal
2387
+ ```
2388
+
2389
+ ### `buildchain tail-reseal admit`
2390
+
2391
+ - Help: `buildchain tail-reseal admit --help`
2392
+ - Canonical id: `tail-reseal`
2393
+ - Options: `--output`, `--request`
2394
+ - Syntax:
2395
+
2396
+ ```text
2397
+ buildchain tail-reseal admit --request <request.json> [--output <admission.json>]
2398
+ ```
2399
+
2400
+ ### `buildchain tail-reseal plan`
2401
+
2402
+ - Help: `buildchain tail-reseal plan --help`
2403
+ - Canonical id: `tail-reseal`
2404
+ - Options: `--output`, `--request`
2405
+ - Syntax:
2406
+
2407
+ ```text
2408
+ buildchain tail-reseal plan --request <request.json> [--output <plan.json>]
2409
+ ```
2410
+
2411
+ ### `buildchain tail-reseal seal`
2412
+
2413
+ - Help: `buildchain tail-reseal seal --help`
2414
+ - Canonical id: `tail-reseal`
2415
+ - Options: `--output`, `--passport`, `--plan`, `--protected-readback-root`, `--readbacks`, `--request`
2416
+ - Syntax:
2417
+
2418
+ ```text
2419
+ buildchain tail-reseal seal --request <request.json> --plan <plan.json> --readbacks <dir> --passport <passport.json> --protected-readback-root <sha256:...> [--output <receipt.json>]
2420
+ ```
2421
+
2422
+ ### `buildchain tail-reseal verify-platform`
2423
+
2424
+ - Help: `buildchain tail-reseal verify-platform --help`
2425
+ - Canonical id: `tail-reseal`
2426
+ - Options: `--artifact-root`, `--mode`, `--output`, `--platform`, `--provider-readback-root`, `--request`
2427
+ - Syntax:
2428
+
2429
+ ```text
2430
+ buildchain tail-reseal verify-platform --request <request.json> --platform <id> [--artifact-root <dir>] [--mode retained|resealed] [--provider-readback-root <sha256:...>] [--output <readback.json>]
2431
+ ```
2432
+
2042
2433
  ## `transaction`
2043
2434
 
2044
2435
  ### `buildchain transaction`
package/docs/cli.md CHANGED
@@ -1033,6 +1033,14 @@ The command validates `package.json`, infers the exact release tag
1033
1033
  `npm publish --dry-run --access public --tag <alpha|latest>` unless
1034
1034
  `--skip-npm-publish-dry-run` is passed. It never performs a real publish.
1035
1035
 
1036
+ ## V4 Adopter Delivery
1037
+
1038
+ `buildchain adopter-delivery` exposes the public v4 driver gate, exact
1039
+ readback, N-1 bootstrap lineage, and published archive loader. `run` emits a
1040
+ rooted non-authoritative readback, `verify` recomputes it, `bootstrap` binds the
1041
+ exact v3 authority and v4 base, and `archive` verifies public npm archive bytes
1042
+ and package identity. See [`v4-adopter-delivery.md`](v4-adopter-delivery.md).
1043
+
1036
1044
  ## npm Publish Gate
1037
1045
 
1038
1046
  Buildchain's own npm package is published from
package/docs/dev-alpha-candidate-patrol.md CHANGED
@@ -59,6 +59,14 @@ controller then compares the selected SHA to the exact Alpha head before it can
59
59
  be eligible, so a bounded scan cannot turn a commit outside the promotion
60
60
  ancestry into a candidate.
61
61
 
62
+ Generated next-development version preparation is not a product candidate. The
63
+ observer skips both the signed `chore(release): prepare ...` commit and its
64
+ two-parent integration commit. When later product work becomes qualified, the
65
+ nearest preparation becomes a reservation: Patrol reads every path changed by
66
+ that preparation at both exact SHAs and requires identical Git blob identities.
67
+ A missing or stale reserved path blocks selection before the Release Cut and
68
+ therefore before any heavy candidate build.
69
+
62
70
  The decision is `kungfu-buildchain-channel-candidate-decision/v1`. It records the
63
71
  source and target branches and SHAs, comparison distance, workflow paths, run
64
72
  identities and attempts, completion times, URLs, policy, and a canonical decision